A very easy to setup and use two-factor authentication plugin.
It has all the features a security conscious WordPress site admin requires, including backup codes etc, ability to disable / enable 2FA per user, support for Google Authenticator and much more.
I use it on all our websites.